TNS Poisoning Atack

[manjini]

Hello Erman,

We have to find workaround for TNS poisoning without 12.2c upgrade , can you lead me to rigth document for 11.2.0.3 and 11.2.0.4 non rac  database.

[ErmanArslansOracleBlog]

Hi,

You mean CVE-2012-1675, a vulnerability in the TNS listener which has been recently disclosed as "TNS Listener Poison Attack" affecting the Oracle Database Server.

Yes, I can lead you..

Did you check  my related posts?

https://ermanarslan.blogspot.com/2014/07/ebs-122-rdbms-listener-poisoning-oracle.html

https://ermanarslan.blogspot.com/2017/03/vncr-valid-node-checking-for.html

[manjini]

Thank you for help Erman,

What I did was;

for 11.2.0.3 databases I applied patch and vulnerability fixed.
for 11.2.0.4 databases I added a parameter to listener.ora which is "SECURE_REGISTER_LISTENER = (TCP)" and vulnerability fixed.

[ErmanArslansOracleBlog]

Good then.